Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 19:24

General

  • Target

    23092_01.exe

  • Size

    2.3MB

  • MD5

    b1076dea3c398326478bb0d03c266086

  • SHA1

    ed45e82e58fd4c2764a5dd7c8f845311f6485826

  • SHA256

    abf118e584b79b827445ad79f1e4ba1dadb8237b338f4bae1f09c69e48d0b3eb

  • SHA512

    efa1647813b926e1dc0c4d12899cbb223774966b9336df1055f7db416e94e4e8b64227716ce98c2649f229ccc4ab28d77ee9840b089f74bc108f471bdee89442

  • SSDEEP

    49152:ZjZGyv5iQPJ3wM9CFHADGdGMnD3Pk7fx1mX7UcfXMV4raxc:/G6iQPFZwFADGdGMDY1wxXMV1xc

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\23092_01.exe
    "C:\Users\Admin\AppData\Local\Temp\23092_01.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Users\Admin\AppData\Local\Temp\is-J9Q7O.tmp\23092_01.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-J9Q7O.tmp\23092_01.tmp" /SL5="$4010A,1981680,140800,C:\Users\Admin\AppData\Local\Temp\23092_01.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious use of WriteProcessMemory
      PID:2828
      • C:\Program Files (x86)\Trust\GXT 165\Trust GXT 165 Gaming Mouse.exe
        "C:\Program Files (x86)\Trust\GXT 165\Trust GXT 165 Gaming Mouse.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:2460
  • C:\Program Files (x86)\Trust\GXT 165\Trust GXT 165 Gaming Mouse.exe
    "C:\Program Files (x86)\Trust\GXT 165\Trust GXT 165 Gaming Mouse.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Trust\GXT 165\Lowerdev.dll

    Filesize

    56KB

    MD5

    0354b4f0b66acfaa409bf9ac99eca077

    SHA1

    000ecf63983aa34b59b1a4cd2da6d50b9ed5825a

    SHA256

    f565b735a294bcf647efbb82566b8d3257c0539177495406cb2150a7295fe13f

    SHA512

    b06db2b95e435a327c2c2c0fadf3976ea064e31c84825e235315b2e0ea19a201979c7eb3c470f3dc4d57acee51e3fc7019cc721e6f2e82e4e165e2f60d8174be

  • C:\Program Files (x86)\Trust\GXT 165\MenuEx.dll

    Filesize

    236KB

    MD5

    ed58c9ae16da29d34a9751f02d6d06e4

    SHA1

    c75e22b71927b27b9cc5054798083afe716a9ddd

    SHA256

    22d7e985e2bd9ab40650b0664666d528203d9cfe2ba9a0ffab64595f0aa6fa5d

    SHA512

    42d65ad9a9b0953b23dbd292177e95d444dbc3b0a45554b8068fab65c711b7eb4d35881665f792b31d650601d10ca234cfd84f40e466a39f563e02673f8fc93a

  • C:\Program Files (x86)\Trust\GXT 165\appico.ico

    Filesize

    9KB

    MD5

    6b41206f7d0c45bb7d49f6372f1c6778

    SHA1

    f7f70a1f6b18f4be6ff8aab4967b0f6287cf6abb

    SHA256

    63afe63ed0f111c687d0f08f7fca237ccc2ab30eedc41af55f32fea8e48dd7fa

    SHA512

    c963c0a91e9d36fe5978d212ab248c9be1fadbb087aaa2fe06a8fbef579f2cbefb77a9a7065a7bfcc92a483c1b17e9c767a8c6675d65521b5b343d06a0c0a31c

  • C:\Program Files (x86)\Trust\GXT 165\cfg.ini

    Filesize

    1KB

    MD5

    7d4c3f61e6ded59686088e99835ffb49

    SHA1

    d4a46cb22fed17360c633174681867d7ab346b02

    SHA256

    ca911e95393e78128d22436fc99efaea78cb09b020a60ef578a9ba7f009b47ca

    SHA512

    172e05b4f74d59d0d3ca162d81d864e70c4681e7f2a439d0cd5028569c02bb4d7f4973171354eeb75ad0bfe05f38df2d3877cdb5396b78b7251e5c60838361a8

  • C:\Program Files (x86)\Trust\GXT 165\skins\add_dn.png

    Filesize

    3KB

    MD5

    dbac801bc011bc0b4e962ff8ac4b9997

    SHA1

    88753257e1f63a868e178ef9617c39994453d34d

    SHA256

    30296fa98a080cdf9b920f0cf470fbcb23adf8627c08234c64c5c6ef290fdd13

    SHA512

    eb994fd9076a647b55b61de21c0a9647e390b5ebb68cf4c4c5ae2a55155b5194c76e5aef80b4a84fc3c6ce3d8880ee12b2b4529fee5492a8e63467638f0cdfa3

  • C:\Program Files (x86)\Trust\GXT 165\skins\add_nr.png

    Filesize

    3KB

    MD5

    c55bb824eab876167dfa067be946fea9

    SHA1

    dd716e51e0fdec1157d28fb1bb8a39245ff8aaa1

    SHA256

    3aacbc4465f472414e7b0ada23bb876c83b08a4aad588b99b6d9bd77fbc69f01

    SHA512

    8a55b2a1bb7ad6a215527dc6004db2fbdf09540f706822c960db80f8adcec1a53bb33dda65f32bd96c7a913ce0c2b02174395db7cde4b3ff9400a1dc13023839

  • C:\Program Files (x86)\Trust\GXT 165\skins\add_ov.png

    Filesize

    3KB

    MD5

    2b49fd8319259b8060b20eea62e437a9

    SHA1

    3655f7767fb71e767e75538fa47e119a6cb99083

    SHA256

    36de4f67a386b1212a1458904e2257ca035fd54148f5a6596fcb663fb052bf0a

    SHA512

    4f0a8eb0b5faad3a9a0c7296880e93852ed19097721427899925de2e4b975f786f7b8f516d6336fb468d622f1e6216423a14afa3a12211bcff22ccaad87f564e

  • C:\Program Files (x86)\Trust\GXT 165\skins\btn_dn.png

    Filesize

    3KB

    MD5

    115c9cccef4f1a83d2fe0f79a90d92c5

    SHA1

    32e9ad3628897068df3138cbb257b2f1a32ec05f

    SHA256

    23813163a14261e97560540a678652286779465049406d5f470fa1f078c45724

    SHA512

    1be60d8f6a899275b19840efa5ced960352189613db4a3b9afcc1b703483bb7f3368f97beb8830552cb6c29493c5879de1b6dee927a943045013c6342fb041c5

  • C:\Program Files (x86)\Trust\GXT 165\skins\btn_nr.png

    Filesize

    3KB

    MD5

    e12aef32f4b8dc330db07a37111f757e

    SHA1

    639ce4e432b2bce112ccea3a146602f9044e70b3

    SHA256

    76183aa6be4d37771dbd54d186600c552656a2bf68b22115cc9a27993e4102a7

    SHA512

    ccac94a8ba0ba0dcad42a87eb603797eafbd5d189013c3b438bbd164405b62186e29947c4762d5fc5bbbdae8ae8a4d654fd4a0ddc0d24b657a8fd005b28d167e

  • C:\Program Files (x86)\Trust\GXT 165\skins\btn_ov.png

    Filesize

    3KB

    MD5

    b5ee45ab1f13474b659e3697c4f145d7

    SHA1

    056f8df41a10626b06c37a94001414485658666e

    SHA256

    113cf5bcfc3a67e065dcc1a1fc6485acfea36b842cca1b0a4fc2275381f6f4f9

    SHA512

    d0fadc283cba2f8a1df4d3015c962f825f1d616030f088edab00cc853b1d48a7acd3dcb61da57f4926caacb84e454c452777343e8fbc40c3517d12288815a476

  • C:\Program Files (x86)\Trust\GXT 165\skins\button2_dn.png

    Filesize

    3KB

    MD5

    d58e4441da4980bcbfa07d2609576aa8

    SHA1

    5aca7485657134fbce6f312812f33aa3988e38ec

    SHA256

    cfb13195999a5a98b277d489a32a5610740d1e3ae57ab678fb97a5c89978a58e

    SHA512

    0f3ef53353a4d8fa4483533efc983200fc56d9263dab799a31ebef8a9dca5f9c40894691699a99eb2d6bf358a3b0fb2dab467dd98c01faefcf567002f7383c5b

  • C:\Program Files (x86)\Trust\GXT 165\skins\button2_nr.png

    Filesize

    3KB

    MD5

    0876a34689b98f9e827ee776b8149c21

    SHA1

    942e62e8d3336cf026c6bf3cb8dd8330aab96d3b

    SHA256

    58d5e323b5289527d241e5b93410f14a44553a83eec04174b224d5346e252e25

    SHA512

    64deae7cb16b856a3623572a564bb175b4d09ea72a2a4702de152cc31c8f39ccffa11a2705d5769231319a9be5f657fafc4e73dfc821826ccfa909a9739162f1

  • C:\Program Files (x86)\Trust\GXT 165\skins\button2_ov.png

    Filesize

    3KB

    MD5

    50fca96fcbf82dbd7dc57ecdad74f4a8

    SHA1

    1bf6358d4fe57cda51d9401c347529d69e3de56e

    SHA256

    5fce68022fc92254e4c6ad052d49329cef84c98bba95508c715f1441a3aec254

    SHA512

    8e2b2470f04b82ec09b1c8a9b433ebb713a8f1a67d71bd1b7baf80f7364f82677de27702931bdef29d88426bb72847bfd2a29221ce9e671089d359a337700179

  • C:\Program Files (x86)\Trust\GXT 165\skins\button3_dn.png

    Filesize

    3KB

    MD5

    2955a5d49b1aa631ce5a186fbc6c4268

    SHA1

    8830735a5586c54ad0292d23cd5b44d5c8bd12af

    SHA256

    8d07acf1b0f747a39a8aa0bfb7f329e3b0cbc86ad10e9a5f4915305d7a4c3642

    SHA512

    2d93f88b5bf4b7e8d13e9c3536d968642321a2c9dacbeb1bbd620a218ab079b72d9221b390b0405450a9b538998ef169607fb0da38b3847ab945b4193e400f8b

  • C:\Program Files (x86)\Trust\GXT 165\skins\button3_nr.png

    Filesize

    3KB

    MD5

    0ee9ca027e932f41e699d4e4ed23c99d

    SHA1

    a5c1817a28b90506d0f72d07b9d2a623c69d2960

    SHA256

    bf594830423d3445ae08740ee2520ec4fe121b59c7cc3c261da69c3ee00f80ac

    SHA512

    5319caa9d9ddaeb3795416271f93b653e92003b21edb78c93eead800d0f73dcbbbfe6b91672b208264091302392a7059069150402abe7bb91c035d4f79b38a3e

  • C:\Program Files (x86)\Trust\GXT 165\skins\button3_ov.png

    Filesize

    3KB

    MD5

    56161e0cd7d01b5ea25ab1b1510e1034

    SHA1

    573112da7c74dd4441db8fa0bae8c2f177dff9d3

    SHA256

    b19b53850bce89645d03afc550afec815f7597db5fda881d46af9d16f647c157

    SHA512

    fec714fa570172faabb374d475a93ab0bd83eea448b860a544b1be7276ef78c2c74ecec8cfe7c6375d7084ea90e6b835e0e0eee1038caf0547b5d66ab03f8e20

  • C:\Program Files (x86)\Trust\GXT 165\skins\combo_dn.png

    Filesize

    3KB

    MD5

    d1ee9035fbf922c88b8688c21d924c03

    SHA1

    0542caaa7578ed57e99dfc790a76f103f6a9991d

    SHA256

    f4dd43202db36e5e0b518fda04331a2c14cb95dd72e4ffff1b0584fd6439fa88

    SHA512

    df2c0a9a4e90ab7b9d6fc6db6d873eb57b1d27b3dc92df3a2568ec00faf4e8e13084ad5f7cdee9ef173e96ec8a7210885e48c22694c7c23cbd90c7c335a958c8

  • C:\Program Files (x86)\Trust\GXT 165\skins\combo_nr.png

    Filesize

    3KB

    MD5

    5cbcb1dc7f2d8e696dca6202dcb3f08d

    SHA1

    32d3e7beb7435c5ae74d9ed701a809bf4c2cf6ca

    SHA256

    05259bb9f3fee95585588c813273a14f5b6e01b003174725167a8ef6540371c9

    SHA512

    83312280d70ed345c7d3097d953dd3834f80fff331b0a8d14e191ad367008c6c26aa2a173e87db0be6419d6996e4f58d2057965ad4fa19b9b1fb6a530ddae6bd

  • C:\Program Files (x86)\Trust\GXT 165\skins\combo_ov.png

    Filesize

    3KB

    MD5

    0f07377b4f25346b59c484fa1c1a03aa

    SHA1

    72cdcc800710c69ab4075bbcc3fce78e4578bef2

    SHA256

    9f3b32e54dd6d00721a68f3b187121c3d663f55034a77339cffaf1b66e3757ba

    SHA512

    4303caffae579612d4afd980f85d536908b19acf2366bbceab19a3fd1ed5f1bcef9dad1338f2dc8d77ded8aadc5c8cf71b28db1efbde53b9316071fba270735a

  • C:\Program Files (x86)\Trust\GXT 165\skins\del_dn.png

    Filesize

    3KB

    MD5

    01edb0d178c3a6325d41d0201a6dea05

    SHA1

    ca3e49268e1530f9af50561ead3e438ca048b2e9

    SHA256

    8a3707068f0f2a3efb3aaf98671fb432456120fe395f357e950872693e60862f

    SHA512

    474377a3741305cb311064ffe017c1556e43f4421116b4c59dd4a40faaae9bfb17cefab3ba371c2837cce9c058456ffab837ee57608dff2d39fd91119035cd96

  • C:\Program Files (x86)\Trust\GXT 165\skins\del_nr.png

    Filesize

    3KB

    MD5

    3246e7e8d7f866b6b8e188f0cfbeac23

    SHA1

    812f85d56ea593b9fe71044787ae517faa0a8083

    SHA256

    eaf275ae906f2d57f8ab190583e5904a19c770293d9a348ec45334bd0cca89db

    SHA512

    c20fc3fef9fe1ab1ceaef53a67c0a475f669c8492fd1174e0c14715aeb7937664a1b6cb912d10a968d003e889f6d9d8ee44e5393a8f79fe465cd4ca5d60f57fd

  • C:\Program Files (x86)\Trust\GXT 165\skins\del_ov.png

    Filesize

    3KB

    MD5

    14760676a0c995d4a864cd5a4d0c8f9d

    SHA1

    91e16a15bdfd79195d5424c9e2192c7f71453086

    SHA256

    c2bca22795098c8fb9216131402987c3133f4f4e3bbe7f63cb5bba09b0d1638a

    SHA512

    d8f712db0f4ba1895179c851ca2d24fe6d4bd55699a92b9f7c7e6f66a9c8659ba0b5795d9bd3220f542cc432c147d72400005e4559bf102d83b5f450d0b6bb19

  • C:\Program Files (x86)\Trust\GXT 165\skins\dot_dn.png

    Filesize

    3KB

    MD5

    9aee712858d9b2aa93bb0138a9baad1e

    SHA1

    da865085c4a7a73d1a893eea536977778290a88d

    SHA256

    2e23660cf76e89d5402c00f7624096a75d236e65760e77d6e651521483dd0bba

    SHA512

    57b77f5bc1822125a2f03fdd474d9ff45a86bc3b466bb9377938750f77f82812cc8b58c953dba9501711182b41216c83b997d6a5262419220442282eb32b133e

  • C:\Program Files (x86)\Trust\GXT 165\skins\dot_nr.png

    Filesize

    3KB

    MD5

    d0adbef2f2bce5f47f47374c840aaca2

    SHA1

    640fe5b958994c97a84b8e06168ae3e51b25d4a1

    SHA256

    af18b525ea1a46d94b78aced3b6f6e2bd640941307cd67e31f8eb048baad6d1f

    SHA512

    14323d601bcbdb737e21980bf4411fc75d6bcb348644c76d99236c3e681b50164d740bf242e61c760b39546cac0445eaf0bf7584fc9be045c8f371cee65ff4f7

  • C:\Program Files (x86)\Trust\GXT 165\skins\dot_ov.png

    Filesize

    3KB

    MD5

    870104cde8cd4d44b8bea5846d31c3fc

    SHA1

    12533f976405ae45705120eda3c087b78e0287c4

    SHA256

    a10fc658a222f1fa272317aa7b4823c5948ae7a84bd0129a7a572bdd50ebb1cf

    SHA512

    6b1a7c1c7e3383bcfb16ca0b53b285fad5788a95f92710d87a111644fb908e483ecaf4f39acf4dd10a389402b1f5706fc021aa54806430a2e69940a7234757bd

  • C:\Program Files (x86)\Trust\GXT 165\skins\exit_nr.png

    Filesize

    360B

    MD5

    082c84921cbbd8205d3e9262bb9336da

    SHA1

    0c238c6381da2757f41b78ab0543624b0e0e6d62

    SHA256

    5872d9e114467983cfbf775e262421f8cdd7f14908b81a169cecf4876f5d1313

    SHA512

    60ffd4c33f1f73d4d8778610e049e3258ba5416af98de90a8227ecd0af92c9744d89521c5910f2a0e82b5019147183023c66bd0c6545d8d7953592dc3f5663da

  • C:\Program Files (x86)\Trust\GXT 165\skins\exit_ov.png

    Filesize

    361B

    MD5

    36e95ec376307c65e60b74e571933ac1

    SHA1

    084817a92171630b437986d198395f04f8741e51

    SHA256

    686a6c7f26c6a79139eaab6dd6057425dee22bffadcbdf28bc58427594f4c345

    SHA512

    7edff7307e984f815a1ae37299ef2dac76cfb7b63afd5b0800afd37c19b4b017536a38d7e2781ad471eb569011b9e5b27d0415d1ca814cbe7d670b84833028e2

  • C:\Program Files (x86)\Trust\GXT 165\skins\header_nr.png

    Filesize

    3KB

    MD5

    ec2a7cc729b0c5d2f840b16478a497a6

    SHA1

    c9c24c2fe505ecdbf1adf51f717206f3e5c1a2ee

    SHA256

    67234d48f1a3c671e530b1739d6d3f714ce46221b465cc154562c67f2979a1b3

    SHA512

    f4dcc5f9ebb576ae86b06ddb666b3308c6c76f7fc7c8d4542edf3c0c9a7f2456381aab99ef774056b9e3fc77a0febbee550883ce3592ebdce6054b2517b83062

  • C:\Program Files (x86)\Trust\GXT 165\skins\header_ov.png

    Filesize

    3KB

    MD5

    cdf3c88c8aa49594f67a1101d57a51d1

    SHA1

    cabd47d55d8479542ffcd299543561acf7098ea0

    SHA256

    0e36f4842c56fadf32310b20447bca616aa7876e097d83998372f94724b1748f

    SHA512

    e59ec44a5cc21bf94e6b95e7579b545c6069398fec14da98fcf0b5f1b1a23aa020de7ac2f3c7951589fc79dae8ac17e81889f52799adb689b0459ae8b18eb285

  • C:\Program Files (x86)\Trust\GXT 165\skins\main_nr.png

    Filesize

    655KB

    MD5

    1ea3099588c9b30170b64245cfa395b9

    SHA1

    9d36a45dec82767d3d753857ae8273b8d3c81772

    SHA256

    60bf69b8177898d7392ecff1f8cef1e6a649d46ebd23cb297ee1821e9224e4fd

    SHA512

    6855f382e32ff337ad23516091c9f17960aa9d6451e5f8069ee7a209d37a542110a737c19ed60c95eb54650c1b3d9c5e1e4f89e7255ac707fbc713f9a101f2a1

  • C:\Program Files (x86)\Trust\GXT 165\skins\mak.skn

    Filesize

    520B

    MD5

    e69e454dc1ea2b1b194596cfb13f1672

    SHA1

    aee7cdf198540f0f7f8da37da68fa5bf37bfb8e0

    SHA256

    2ed993c30d6d36bd16aa4f6bc0b70608f5f5bdfb23ca0e28953c027b65efba07

    SHA512

    53717b88b772f476670f12da36fcccc821fd8424651064ebf9ca30033a02e3a2fb7d9a975b53102af8f107b8f5bc23c0ab6833c9004e072265d3bd5722219c64

  • C:\Program Files (x86)\Trust\GXT 165\skins\min_nr.png

    Filesize

    242B

    MD5

    807e63bf4bb49c1a03d6136dc87c5683

    SHA1

    25551d289d189254528a750d9b733ebab8982a18

    SHA256

    7b7be5a8863dac9e2aa0f6317f954e08fe9c458970780b11609572eb070a68ef

    SHA512

    6361b634c3ec703266cc5bd74c8669964eef464e009c303fc2f6b887a281951c26f7e370f047bd8369d777d8501b822b88de2fc67652bba8470fd44a59970b2d

  • C:\Program Files (x86)\Trust\GXT 165\skins\min_ov.png

    Filesize

    243B

    MD5

    2e058896065a6fb4e0e96f2362e2bafa

    SHA1

    5804d4be7335e985e2bbe6fe9cf6a1d35a2575f8

    SHA256

    5a7f91f2bbd6e2b35c5cc1351c67e486cceb6caccfd035a896794066722aed0c

    SHA512

    aa27e9f2651e9dad293cbcdf774636c77698ff8b3d10f43c828fd705ced971cf58dec02ce24487d3332b5812a23561a1c1e59a48cabb1a2f80bf79fc782779b8

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\dpi-bar.png

    Filesize

    2KB

    MD5

    4692effa68a2df47251bae9c679960e9

    SHA1

    97091ed744dce2a29008ac6b9407ba1a9b0c5a44

    SHA256

    752da11fde84c0a8ace110eb5a73e0abb3b0b55f8a6ca6b57e3e57323996daf9

    SHA512

    63bce304009ccf8fad9fba48b9907da7786699bed576459624814945bbe125c162c6e248d0a7a913f72b88b51f33807c91ffae2b81c87a513cf10a5badfd8884

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\dpigrid_nr.png

    Filesize

    2KB

    MD5

    a1c528a2927311176d0391bb97a47ce0

    SHA1

    4ed7e8682b3604810d6fc1463785f1f7037b20d6

    SHA256

    28504bcaed48f1fecf4e485ea1cf9953115631320d0fee91466b49e4e9ad3914

    SHA512

    51122a3abc79ddb1c3414ebd376b36d9244b2b9b1b9dad18dcfb726f47f6d6f2f8c1287bc4768ed7eb57d614f7cbfec44f9356cfd4f06c30b78486dd38a12a32

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\mouse_nr.png

    Filesize

    146KB

    MD5

    bad373f4ba22bb82bc5c5e8676ceb6c0

    SHA1

    0f530f30445e3552d9d49469e42d28641ad4811a

    SHA256

    513819e09d735b1e7cc316416ba3f61a20a8d2f5761576d2d612862652962703

    SHA512

    9260081666ba736c5def4822129f47015d9f64d9303d7cf6fd5261643a5bfa1b49b5186915e56b7fadbefc8512e53eebd938a5dd1815252f078d1cd87e8ea1f8

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number1.png

    Filesize

    3KB

    MD5

    88120414fc3ffe6d92c09cbaebed185f

    SHA1

    26ebd3885a5626e432769ceb8bb0e94f4927d70d

    SHA256

    738ce0723fcaa96134ea94f6a30788923340bbb6897f8dc62328ee4ded8bac29

    SHA512

    71903a46909af66ba6d09b3323f8d42816e7e3e454c8f314e8402d13a17f918440954bb6ef9f6ab5e04109516264dd7c16a06a4ba08a260ab36e10ec42c8c723

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number10.png

    Filesize

    21KB

    MD5

    93097b2904efcc5fd51bd8eb61f0eab6

    SHA1

    d1571fa134e117a3d1e96dee0157f52afb64c59a

    SHA256

    b7db7dbb04671ee3ae2cf420576c41d165a4a501cad0da68b20065ecf7fb81d6

    SHA512

    9274efbc0d7e7ac9be2c32fd9bc0e1e756783bff29557d202858a7080367709ef192f17f43bc2fbd42bba531feb6dc028e398d33784f8b8f352f3c7f3b70fdd1

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number2.png

    Filesize

    3KB

    MD5

    7869ec0dcb3a416d900a5e10b5c23956

    SHA1

    f634dc20399a564ad72eed440bb4ca055e49e4ab

    SHA256

    3f2a60eac7e69fad0f8a58bf8582c66707d810dca65e582a28464bb8bc40faa8

    SHA512

    38e1758186385029eee8c600f3edc7d8d75f5445ec930bb89a8219a2f8e4a6a164f58624633ded02319ee994ebd6349d7b71d1415cb0f63e2c0770165eebce5e

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number3.png

    Filesize

    3KB

    MD5

    262a25d8358b1440567abf708081009c

    SHA1

    09963fdd92e69cbab98075a9cc8385996c0d72f9

    SHA256

    a35b4e6cf05cebab2b8652a1330985c4ed44f1769c64ac9554eba68097db38b8

    SHA512

    2f4cb0a520d554fb567076256fcfe8ad7834e86c737b3ee9099200180927c0be9dfe80d997ffc316c45c24d2c2fe098baa8ff7777a0e5c502795aa3f247f4da5

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number4.png

    Filesize

    3KB

    MD5

    3c2c9a7b843a157e04a3e59d6b150698

    SHA1

    18242830be87252b7bc2e8c505d192f8d582c430

    SHA256

    ad961f25977b3bfef3a8868ac3de2732f2da534167ab51ff3625c94cc05e254f

    SHA512

    859b909db21035729dc13db49f40ef621ba1503cfe5cd8f82d34ff5e66a8b5226cbef1e09869cc0525b5626f2818d50714c62569c5ac028eace3eaa9fa6b167c

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number5.png

    Filesize

    3KB

    MD5

    55e7cf3313013bdee3174e04a2c5f693

    SHA1

    d9aab9a17121659dd34e7660fb2387a3a3be6754

    SHA256

    dad83cb4df7a5bfe29e8fbc903a25c867e5bb7f8151ec30d03a13aaa535f909d

    SHA512

    1bf9a7ff8d5d02c294b3cd67af47462ef3f3a319bd14bfa341abdf6c615eb46676d5ef3bec774f5af8cfde06c3b25fa2882ddf1e5de9e4962e2eaf254ca688fd

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number6.png

    Filesize

    3KB

    MD5

    e022a95e4f20cc8fac9b3288ce3af363

    SHA1

    594d9e1fe8d15b442cabf933a890ba56e2093bf2

    SHA256

    bf9d604fa57ab7e55941d7390def22969cd23cc060aa5d86336d1001e261e36a

    SHA512

    b552c9c692860a3313607b8b9d5435363a1195bd53cd0b970122387b059bbb109c4db3828f412e2fe9c273fa9baf7cc9035fdd2bd348e5be60f414e84ca7c004

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number7.png

    Filesize

    3KB

    MD5

    563f272d7ccbabdc1c6500992fa9b540

    SHA1

    12bb81224944d5fbce14788315647d4c0f2b0c4a

    SHA256

    9ea29e613ef07b3723931ec6d9317bd51e6afbad30f076e562130a74ca3d2406

    SHA512

    f270ed38240fda65d6a927e14f994342f675137d6be83c93d57db176befe0564b6a66180a62e738844bc768166fff7244c18a42e634324b2e30053150e3bab9c

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number8.png

    Filesize

    3KB

    MD5

    b9a119028abf9ce1602576de87022cea

    SHA1

    8238bdc153a9ef783a892ab58c304947dc167fd5

    SHA256

    771bff5fe395d7844c3e46e87e308db35cd85f143ffaa967f7229945669061de

    SHA512

    691fea80198c422f3ec540626c35532cca7d2cf3829c764e14bf4c3a2a91e86e30c6ae8348670c6210516b3a74416ddfdc086466d3c5cecbae3de2406e640bc3

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\number9.png

    Filesize

    21KB

    MD5

    60d9f6e2ba57d9249786203d28b8015a

    SHA1

    abea8e77d27b12bb0a53805556145603d1408394

    SHA256

    76ffc0772d8d1ee8ff9885e7631f6ac5310f391c8985a65676257c68ff31baf8

    SHA512

    ba6b46a9496b231200c7000c4c5d28c7688ed7fe09c8611092d33b6da82645afb9432f9ec49879145f03959e481ad2d5a1e250c0ba79b4c960d5dcd852578082

  • C:\Program Files (x86)\Trust\GXT 165\skins\mouse\slider.png

    Filesize

    3KB

    MD5

    616d5ae435b9f9d61623e9dddb2826dc

    SHA1

    61e0abf6b0e31689d7a74607c516611014c0e9f5

    SHA256

    bc668866570d47537e091332f79229176af3c366a564e8470459366009e47ac8

    SHA512

    556946f45152be71a02fb4d576ec533583df3f5ae519625847a37214ebefa9381d38f64bc238dfc34c39fe9d064dd510e98d92ca013a15f406b876cedf842679

  • C:\Program Files (x86)\Trust\GXT 165\skins\radio_dn.png

    Filesize

    3KB

    MD5

    002001b8b38bc91698be3abfb3437496

    SHA1

    3e3a71fecb95a9b36f4b1bf42429c72bbd7ca93f

    SHA256

    438ea14fe704eebd14295b068335a99d41b529950d34dd5429f7118daa9b046d

    SHA512

    3e5cd9f9d61ea1d262cc7b93357f12ba029309730651154fb4584cc0ec10f1e83810641ce2f3240db67da957051a0f46d690a7621f2efd6ebbd22b1e9aaa3c44

  • C:\Program Files (x86)\Trust\GXT 165\skins\radio_nr.png

    Filesize

    2KB

    MD5

    d48c1ef4bd966572979b9135ceeceb44

    SHA1

    fba09ad836f2e35decc583d344dd99c96f6da289

    SHA256

    85ee72c69976b351b26c3972b2bf2c61286335043a04c04f2bbf246f565666d3

    SHA512

    c77f7111c5037a593c298e0cc1b2f5da5a4c097845f8456e18591c720a4979dff33f22d55d8adafa5c6650d4ff84a34d023c4209675b714ea8a3da35fba711ab

  • C:\Program Files (x86)\Trust\GXT 165\text.xml

    Filesize

    16KB

    MD5

    8078ce86440299ab936b7b7fd9aec50d

    SHA1

    a7e130c46c7d8f5cb9951d6e5d25aeb48b16d2db

    SHA256

    88fce2990a0b9fb505b2cd81e263e8fe685e1a2225262f60568f34a88edbccbf

    SHA512

    dae288222dd7db1c2461f0e3530c0e9b625a285a2c0f869246b3ddb1036d967843c42f9cfecff5b16e2e06572c2cada26e4f8cd9bf500ac9fe380de5d0430d23

  • \Program Files (x86)\Trust\GXT 165\Trust GXT 165 Gaming Mouse.exe

    Filesize

    2.2MB

    MD5

    c3817a71a5dc50e967d60dcbdb6f12b0

    SHA1

    5dfb8feb9f1a4c2de1522bf92227d37cd2d581f2

    SHA256

    a0d7bc61e429182dbe5b312717d9d390f342c14ac2335bd69250750d6015f42a

    SHA512

    ca34637130bdc1027098059af5bde5f16a8bb5947f135c9f923f0b06e26c4c4b2263987d7d7cfb30c8a381147fe04899e012f9781a98d9538a6321855cfc7332

  • \Program Files (x86)\Trust\GXT 165\unins000.exe

    Filesize

    1.1MB

    MD5

    7b3f4a47553ce8ff9fa9e196b7a99191

    SHA1

    143ab544dfd5c1c911abf626f6cb9c3e270cbe62

    SHA256

    f878dbc04423529aff8fa3879feb225615c76162c6b0bef43791580d224e724d

    SHA512

    83d6fe40c1b661640e41e1f2bb688f9a03fc9004989dd5dd1cfdeba45694b7f8ea9417641292bcdc51afe2c526805c477d091897d0da2da23779c1bcbac518c4

  • \Users\Admin\AppData\Local\Temp\is-J9Q7O.tmp\23092_01.tmp

    Filesize

    1.1MB

    MD5

    a4cb46c715d6e7b72755eab92123a3ea

    SHA1

    1e769da1816daae7d50c8812c59ee20399431a2d

    SHA256

    686699d59606cd7d2253dff2c92003380361f00b168305e959e66bab9bc725c0

    SHA512

    8bdce037441eb0ed6aa5fdf7569580b32dd5294b6b4a36a054552e5b46fcbba328b659f2277d3a75d23d9ead64a28d3db2fe49c0b1c13e6d799490ce6509ab1b

  • \Users\Admin\AppData\Local\Temp\is-NQ9C3.tmp\InitSetup.dll

    Filesize

    55KB

    MD5

    3bb4a9fd05f14cc833291f7332565843

    SHA1

    def4f41072c57ae0c66dce6b325e6d4f8c32504e

    SHA256

    72f5cfe575253eaff31e27ce8f70b4caaa079d2c42a4130515eecf7f0967115d

    SHA512

    0aa11d6d10c8a8635db9e514e4b6781e7105c9b1ce568f1bd012eed39d46d36340004507233cdd692049bb9ebd8299a067cc5462bdf9eaa43d9ec6d38144f0fa

  • \Users\Admin\AppData\Local\Temp\is-NQ9C3.tmp\_isetup\_shfoldr.dll

    Filesize

    22KB

    MD5

    92dc6ef532fbb4a5c3201469a5b5eb63

    SHA1

    3e89ff837147c16b4e41c30d6c796374e0b8e62c

    SHA256

    9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

    SHA512

    9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

  • memory/2136-0-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/2136-252-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/2136-17-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/2136-2-0x0000000000401000-0x0000000000417000-memory.dmp

    Filesize

    88KB

  • memory/2828-15-0x0000000000400000-0x0000000000536000-memory.dmp

    Filesize

    1.2MB

  • memory/2828-20-0x0000000000400000-0x0000000000536000-memory.dmp

    Filesize

    1.2MB

  • memory/2828-18-0x0000000000400000-0x0000000000536000-memory.dmp

    Filesize

    1.2MB

  • memory/2828-251-0x0000000000400000-0x0000000000536000-memory.dmp

    Filesize

    1.2MB